![Image of Amanda S.](/_next/image?url=https%3A%2F%2Fcdn.sanity.io%2Fimages%2F218g3l3q%2Fproduction%2F8e9d5197823f0729e9de0090f0344a73d7d215fa-200x200.jpg%3Fw%3D150%26h%3D150%26fit%3Dmax%26auto%3Dformat&w=384&q=75)
Amanda S.Data Analyst
Skills
With sixteen years of experience in the Information Technology sector, expertise includes IT Service Management, enhancement of implementations, and development of detailed technological documentation. The recent focus has shifted towards Information Security and Digital Compliance, involving roles such as acting as a focal point during external audits, managing cybersecurity projects, and overseeing access management. Responsibilities also entail creating and implementing IT policies and standards, managing non-compliances, risks, and incidents, and demonstrating a strong aptitude for documentation, process flows, and analysis. Additionally, holds membership in ANPPD®.
Security Delivery Senior Analyst
5/1/2022 - 3/1/2023
Provided technical recommendations and remediations to developers, focusing on secure coding practices and vulnerability mitigation. Attended cross-functional meetings with business and development teams, offering expert consultancy on security matters. Presented vulnerabilities effectively to various audiences, including technical teams, business stakeholders, and executives, ensuring clear understanding and prioritization. Utilized best market practices to perform threat modeling and define security requirements, enhancing overall security posture. Conducted simulation exercises for Cyber Crisis Management, preparing organizations to respond swiftly and effectively to cyber incidents.Information Security Analyst
12/1/2021 - 5/1/2022
Developed expertise in project management within the cybersecurity realm. Showcased abilities in responding to security incidents promptly and effectively. Played a key role in the creation and review of IT policies and standards, ensuring they align with security regulations. Managed the implementation of standards to comply with external security regulations. Demonstrated proficiency in managing and responding to both internal and external audits. Ensured the management of IT non-conformities was performed systematically. Conducted in-depth studies of new information security tools to enhance company security measures. Maintained meticulous control over licenses and monitored the expiration of departmental contracts to ensure compliance and continuity.IT Compliance Analyst
6/1/2021 - 12/1/2021
Managed cybersecurity projects and IT governance, including risk analysis for new systems and applications across cloud and on-premise environments. Created and reviewed IT policies and standards, managed responses to internal and external audits, and oversaw IT non-conformities. Governed access for SAP, AD, and other critical systems while continuously studying new information security tools. Monitored compliance with the General Data Protection Law (GDPR) and controlled licenses and contract expirations for the department. Developed proficiency in risk management, IT governance, SAP, Active Directory, and regulatory compliance.IT Analyst
2/1/2019 - 6/1/2021
Specialized in diagnosing and resolving calls related to Incidents and Requests. Proficient in the analysis and management of the Telephone Tariff System (DAC) and the Access Control System (Ronda). Implemented and managed IT Service Management practices including Problem Management, Change Management, and Knowledge Base. Provided support in the definition and management of Service Level Indicators (SLI), Service Level Agreements (SLA), and service catalog. Expertise in the creation and maintenance of users in Active Directory and SAP systems. Developed and maintained documentation of operational procedures and processes. Generated detailed reports with call status and performance indicators. Led the implementation of the IT Services Management (GSTI) project utilizing the Cherwell tool, defining and creating crucial processes for IT operations.
Technology at Anhanguera Educacional
2008 - 2011MBA in Information Security Management and Technology at DARYUS
2023 - 2024Business Management at CEPHAS
2003 - 2004Information Technology at Brazilian Institute of Education - IBF Postgraduate
2019 - 2020
NIST Cybersecurity Framework Foundation at ITCERTS
3/1/2023CobiT 5 Foundation at TIexames
3/1/2023Cybersecurity Analyst (Governance) at IBSEC - Instituto Brasileiro de Cibersegurança
1/1/2023Initial Training in Privacy + LGPD (EXIN PDPE Preparatory) at TIexames
10/1/2021Cybersecurity Essentials at Cisco Networking Academy
10/1/2021DPO & LGPD in Practice at Ka Solution
7/1/2021Microsoft Security, Compliance and Identity Fundamentals (SC-900) at Ka Solution
6/1/2021Microsoft 365 Fundamentals at Ka Solution
12/1/2020Basic Fundamentals of SAP at Ka Solution
11/1/2020DEVOPS ESSENTIALS PROFESSIONAL CERTIFICATE (DEPC) at CertiProf
7/1/2020Scrum Foundation Professional Certificate (SFPC) at CertiProf
6/1/2020Agile Scrum Foundation - Preparation for EXIN Foundation Certification - ASF at Fundação Vanzolini
10/1/2019Extension Course in Business Communication at Faculdade Anhanguera de São José dos Campos - SP
4/1/2010Curso Windows Seven Client Installing and Configuring at Green Tecnologia (treinamento e consultoria)
2/1/2010IT Management Workshop with ITIL at TIVIT
1/1/2010
Amanda is available for hire
Meet Amanda S.All Howdy Candidates are vetted for skills and english proficiency.